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REMARKS 

Claims 1-3, 5-7 and 9-13 are pending. By this Amendment, claims 1, 3, 9, 11 and 12 
are amended for the purpose of clarity only. No new matter is added. 

Entry of the amendments is proper under 37 C.F.R. §1.116 because the amendments: 
(a) place the application in condition for allowance (for the reasons discussed herein); (b) do 
not raise any new issue requiring further search and/or consideration (as the amendments 
amplify issues previously discussed throughout prosecution); (c) satisfy a requirement of form 
asserted in the previous Office Action; (d) do not present any additional claims without 
canceling a corresponding number of finally rejected claims; and (e) place the application in 
better form for appeal, should an appeal be necessary. The amendments are necessary and 
were not earlier presented because they are made in response to arguments raised in the final 
rejection. Entry of the amendments is thus respectfully requested. 

The Office Action objects to applicant's amendment as not citing the location of 
support for each amended claim. Support for the amendments to claims 1 and 2 may be 
found in the specification at p. 22, line 22 - p. 23, line 1 and p. 24, lines 6-8, for example. 
Support for the amendments to claim 3 may be found in the specification at p. 25, lines 11-15 
and p. 22, line 22 - p. 23, line 1, for example. Support for the amendments to claim 5 may be 
found in the specification at p. 25, lines 20-22 and in Fig. 3, for example. Support for the 
amendments to claim 6 may be found in the specification at p. 29, line 25 - p. 30, line 3, for 
example. Support for amendments to claim 7 may be found in the specification at p. 25, lines 
11-15; p. 22, line 22 - p. 23, line 1; and p. 29, line 25 - p. 30, line 3, for example. Support for 
the amendments to claim 9 may be found in the specification at p. 24, lines 1 7-24 and in Fig. 
3, and p. 27, lines 2-3, for example. Claim 10 had only been amended for the purpose of 
clarity. Support for the amendments to claim 1 1 may be found in the specification at p. 4, 
line 25 - p. 5 line 2 and p. 27, lines 2-12, for example. Support for the amendments to claim 
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12 may be found in the specification at p. 22, line 22 - p. 23, line 1, for example. Support for 
the amendments to claim 13 may be found in the specification at p. 25, lines 20-22; p. 26, line 
20 - p. 27, line 1; and p. 27, lines 2-12, for example. Withdrawal of the Office Action's 
objection to the Amendment for not citing the location of support for each claim is 
respectfully solicited. 

The Office Action rejects claims 1-3, 5-7 and 9-13 under the second paragraph of 35 
U.S.C. §112 as being indefinite. This rejection is respectfully traversed. 

The Office Action asserts that the claims are generally narrative and indefinite, failing 
to conform with U.S. practice. Applicant respectfully disagrees. 

The claims properly recite a combination of elements and the functions they perform. 
This does not render the claims narrative or indefinite and is completely consistent with U.S. 
practice. As stated in MPEP 2114 and 2173.05(g), "features of an apparatus may be recited 
structurally or functionally" and "there is nothing inherently wrong with defining some part of 
an invention in functional terms," respectively. Accordingly, the form and style of the claims 
are not narrative, indefinite or failing to conform to U.S. practice based on functional 
limitations. 

Regarding claims 1-3, 6, 7, 1 1, 12 and 13, The Office Action asserts that the term 
associating is indefinite where these claim recites associating certain authentication 
information (such as a user name and password) with a connection server address. However, 
Applicant respectfully submits that the term associating, as disclosed in the specification, 
means correlating or combining two pieces of information. See p. 23, lines 5-10 and Fig. 2, 
for example. 

Regarding claim 9, the Office Action asserts that the term associating is indefinite 
where this claim recites associating unique information of the client apparatus with at least 
one of a user name and a password. However, Applicant respectfully submits that the term 
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associating, as disclosed in the specification, means correlating or combining two pieces of 
information. In the present apparatus and method, the user name and unique information 
(such as the hard disk serial number) are sent together to the administrator of the connection 
network. The administrator registers this information, encrypts each with predetermined 
information, and sends them back together to the client as part of definition information. See 
p. 20, line 21 - p. 22, line 2, for example. 

Regarding claim 1 1 , the Office Action asserts that the limitation reciting "where in the 
client apparatus" is indefinite as to what associating the first/second authentication 
information with predetermined authentication information entails. However, Applicant 
respectfully submits that the term associating, as disclosed in the specification, means 
correlating or combining two pieces of information. See p. 21, line 1 1 - p. 22, line 2. 

Regarding claims 1 and 2, the Office Action asserts that two limitations contradict 
each other because they recite that the second connection authentication information is 
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generated by two different components (the client apparatus and the connection server). 
Applicant respectfully submits, however, that these limitations do not contradict each other 
but only correspond to different stages of using the apparatus. The connection server 
generates the second connection authentication information during the setup stage. See p. 22, 
line 22 - p. 23, line 2, for example. The client apparatus generates the second connection 
authentication information during the authentication processing stage. See p. 23, line 12 - p. 
24, line 8, for example. 

Regarding claims 1 and 2, the Office Action asserts that the limitation reciting a third 
unit is confusing as to the purpose of a unit of the authentication server transmitting to itself. 
However, Applicant respectfully submits that claim 1 reads "the client apparatus includes: . . . 
a third unit. . ." (claim 2 depends from claim 1). Thus, the client apparatus, and not the 
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authentication server, is transmitting the second connection authentication information to the 
authentication server. 

Regarding claims 1 and 2, the Office Action asserts that the limitation reciting a sixth 
unit is confusing as to whether the first connection authentication information is received 
from the client address or the authentication server. However, Applicant respectfully submits 
that the first connection authentication information is received from the client address after 
such reception is allowed by the connection server. See Fig. 4, for example. 

Regarding claim 5, the Office Action asserts that this claim is unclear as it appears 
that both the connection server authentication unit and the authentication server receive the 
same information to perform an authentication process. However, Applicant respectfully 
submits that both the connection server authentication unit and the authentication server 
receive authentication information from the client and perform an authentication process with 
the respective pieces of information. These component perform their respect authentication 
processes at different stages of operating the network connection system. The authentication 
server performs an authentication process when it first receives a connection request from the 
client. See p. 25, lines 8-19, for example. The connection server performs an authentication 
process later, after allowing the client to communicate. See p. 26, line 17 - p. 27, line 23. 
Furthermore, claim 5 does not recite that the respective pieces of authentication information 
must be the same. 

Regarding claim 6, the Office Action asserts that the limitation reciting a retention 
unit is unclear as to whether the first encrypted user name and first encrypted password are a 
first encrypted user name and password and/or a set of user name and password encrypted by 
a first encryption method. However, Applicant respectfully submits that the first encrypted 
user name and first encrypted password are a set of user name and password encrypted by a 
first encryption method. See p. 22, line 22 - p. 23, line 1, for example. 
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Regarding claims 6, 9 and 13, the Office Action asserts that the claim is indefinite as 
to whether the first encryption method and the second encryption may be the same. However, 
Applicant respectfully submits that they may be the same. See p. 28, lines 3-5, for example. 

Regarding claim 6, the Office Action asserts that the limitation which recites 
"generated by encrypting using a second encryption method" is indefinite as to which 
unit/component generates the second encrypted user name and second encrypted password. 
However, Applicant respectfully submits that the limitation, when read in its entirety, recites 
that the client apparatus includes a fourth unit which generated the encrypted user name and 
encrypted password. 

Regarding claim 6, the Office Action asserts that the limitation which recites 
"generated by encrypting using a second encryption method" is indefinite as to whether the 
"input by the user" is the same set of input used for the "first encrypted user name and first 
encrypted password." However, Applicant respectfully submits that the claim recites that the 
second encrypted name and second encrypted password are generated by encrypting using a 
second encryption method a user name and password input by the user. Thus, the client 
apparatus uses the second encryption method to encrypt the user name and password inputted 
by the user. 

Regarding claim 7, the Office Action asserts that the limitation reciting a 
predetermined method is indefinite. However, Applicant respectfully submits that the term 
"encrypting by a predetermined method" means encrypting predetermined information, such 
as any desired character string, with the unique information and also with the user name. See 
p. 21, lines 16-21, for example. 

Regarding claim 9, the Office Action asserts that the limitations reciting a first and 
second encryption method are indefinite as to their scope. However, Applicant respectfully 
submits that one of ordinary skill in the art would recognize the scope of the term encryption. 
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Furthermore, support for these limitations may be found in the specification. See p. 23, lines 
1-5 and p. 27, line 25 - p. 28, lines 1-4, for example. 

Regarding claim 9, the Office Action asserts that the limitation reciting a retention 
unit is indefinite as to how unique information is associated with at least one of a user name 
and password. Claim 9 is amended to recite that the local authentication generates unique 
information in response to the user's input. See p. 20, line 21 - p. 21, line 4 and Fig. 3, for 
example. 

Regarding claim 10, the Office Action asserts that the limitation reciting a 
predetermined period is indefinite as to the definition of a predetermined period. However, 
Applicant respectfully submits that the predetermined period may be any fixed length of time. 
In one embodiment of the present apparatus and method, the connection only allows the client 
to communicate with it for a fixed period of time, such as sixty seconds. See p. 26, lines 3-16 
and Fig. 4, for example. 

Regarding claim 1 1, the Office Action asserts that the limitation reciting "wherein the 
client apparatus" is indefinite as to the meaning of the term first authentication information. 
However, Applicant respectfully submits that the first authentication information is the 
unique information generated by the client apparatus, such as the serial number of the hard 
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disk. See p. 20, lines 21-25, for example. 

Regarding claim 1 1, the Office Action asserts that the limitation reciting "wherein the 
client apparatus" is indefinite as to the meaning of the term local authentication information. 
However, Applicant respectfully submits that the local authentication information is the first 
information and the second information, where the first information is the unique information 
encrypted with predetermined information and the second information is the user name 
encrypted with predetermined information. See p. 21, line 1 1 - p. 22, line 2, for example. 
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Regarding claim 1 1 , the Office Action asserts that the limitation reciting "wherein the 
client apparatus" is indefinite as to the meaning of the term "predetermined information." 
However, Applicant respectfully submits that predetermined information may be any desired 
character string or may be meaningful information of the expiration date of the RAS 
connection, etc. See p. 21 , lines 11-21, for example. 

Regarding claim 1 1 , the Office Action asserts that the limitation reciting "wherein the 
client apparatus" is indefinite as to the meaning of information unique to the client apparatus. 
However, Applicant respectfully submits that information unique to the client apparatus 
refers to the unique information, such as the serial number of the hard disk, which better 
distinguishes one client apparatus from another. See p. 20, line 22 - p. 21, line 4. 

Regarding claim 12, the Office Action asserts that the limitation reciting second 
connection authentication information is indefinite as to whether first and second 
authentication information are the same. However, Applicant respectfully submits that the 
first authentication information is the unique information. Furthermore, the second 
authentication information is the user name and password. Applicant notes that claim 1 2 
does not recite first authentication information or second authentication information but does 
recite first and connection authentication information. The first connection authentication 
information is the same as the second authentication information (e.g. the user name and 
password). See p. 23, lines 20 - p. 24, line 2, for example. 

Regarding claim 12, the Office Action asserts that the limitation which begins 
"transmitting the client address" is indefinite as to how the user identification information is 
authenticated based on the second connection authentication information. However, 
Applicant respectfully submit that the user identification information is the encrypted 
username and password sent to the authentication server by the client. After receiving the 
user identification information, the authentication server checks to see if the same 
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information, as second connection authentication information, is stored in the authentication 
server's memory. See p. 25, lines 8-19, for example. 

Regarding claims 12 and 13, the Office Action asserts that the claim is indefinite with 
respect to which component of the apparatus performs various steps. However, Applicant 
respectfully submits that claims 12 and 13 are method claims and, as such, do not require 
further structural limitations. 

The Office Action rejects claims 5 and 10 under 35 U.S.C. §102(b) and rejects claims 
1, 3, and 12 under 35 U.S.C. §103(a) over Zhang et al. (U.S. 6,253,327). The Office Action 
further rejects claims 2, 6, 7, 9, 1 1 and 13 under 35 U.S.C. § 103(a) over Zhang in view of 
Leveridge et al. (U.S. 7,233,997). These rejections are respectfully traversed. 

The Office Action asserts that Zhang discloses a seventh unit for performing an 
authentication process. However, Applicant respectfully submits that Zhang does not 
disclose or suggest a connection server including a seventh unit for performing an 
authentication process by using the second connection authentication information transmitted 
from the client address, as recited in claim 1 and similarly in claim 5. 

Zhang discloses a gateway device that controls access to a public and private domain. 
See column 5, line 56 and Fig. 4. When a client sends a connection request to gateway 
device, the device generates and forwards to an authentication server a RADIUS account 
logon request packet. See column 7, lines 10-13 and Fig. 5. The gateway device must send 
this information to the authentication server because it itself has no authentication unit. There 
is nothing in Zhang which discloses or suggests a connection server including a seventh unit 
for performing an authentication process by using the second connection authentication 
information, as recited in claim 1 and similarly in claim 5. Accordingly, Zhang does not 
disclose or suggest the subject matter recited in claims 1 and 5. 
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The Office Action asserts that Leveridge discloses a message digest of the first 
connection authentication information. However, Leveridge does not supply the subject 
matter missing from Zhang. Thus, Zhang and Leveridge, individually or in combination, do 
not disclose or suggest the subject matter in claim 1 and similarly in claim 5. 

In view of the above, Zhang and Leveridge, individually or in combination, do not 
disclose or suggest the subject matter recited in claims 1 and 5. Claim 2 depends from claim 
1. Thus, Zhang and Leveridge, individually or in combination, do not disclose or suggest the 
subject matter recited in claims 1 , 2 and 5. Withdrawal of the rejection of these claims under 
35 U.S.C. §102(b) and/or 35 U.S.C. §103(a) is respectfully solicited. 

Regarding claims 3, 6 and 7, the Office Action admits that Zhang does not disclose a 
second unit for . . . transmitting the connection server address to the client apparatus, as 
recited in claim 3 and similarly in claims 6 and 7. The Office Action asserts, however, that it 
would have been obvious to one of ordinary skill in the art to include this limitation since it is 
implied that the address of each communicating device is sent with each communication. See 
p. 17-18. However, Applicant respectfully submits that Zhang does not disclose or suggest 
the authentication server transmitting the connection server address to the client apparatus 
because the authentication server in Zhang never communicates with the host. See Figs. 1, 2 
and 4, for example. There is nothing in all of Zhang that discloses or suggests a second unit 
for . . . transmitting the connection server address to the client apparatus, as recited in claim 3 
and similarly in claims 6 and 7. Thus, Zhang does disclose or suggest the subject matter 

recited in claim 3, and similarly in claims 6 and 7. 

! 

The Office Action asserts that Leveridge discloses a message digest of the first 
connection authentication information. However, Leveridge does not supply the subject 
matter missing from Zhang. Thus, Zhang and Leveridge, individually or in combination, do 
not disclose or suggest the subject matter in claim 3 and similarly in claims 6 and 7. 
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In view of the above, Zhang and Leveridge, individually or in combination, do not 
disclose or suggest the subject matter recited in claims 3, 6 and 7. Withdrawal of the 
rejection of these claims under 35 U.S.C. § 1 02(b) and/or 35 U.S.C. §103(a) is respectfully 
solicited. 

I 

Regarding claims 9, 1 1 and 12, the Office Action asserts that Zhang discloses or 
suggests a receiving and transmitting unit for receiving a connection server address from the 
authentication server, as recited in claim 9 and similarly in claims 1 1 and 12. However, 
Applicant respectfully submits that Zhang does not disclose a receiving and transmitting unit 
for receiving a connection server address from the authentication server. 

As explained earlier in the Amendment, Zhang does not disclose that the 
authentication server ever communicates with the host. See Figs. 1 , 2 and 4, for example. 
Thus, even if the authentication server were to include its own address is its communications 
with other devices, it would never send the address of a connecting server to the client 
apparatus. There is nothing in all of Zhang that discloses or suggests a receiving and 
transmitting unit for receiving a connection server address from the authentication server, as 
recited in claim 9 and similarly in claims 1 1 and 12. Accordingly, Zhang does not disclose or 
suggest the subject matter recited in claim 9 and similarly in claims 1 1 and 12. 

The Office Action asserts that Leveridge discloses a message digest of the first 
connection authentication information. However, Leveridge does not supply the subject 
matter missing from Zhang. Thus, Zhang and Leveridge, individually or in combination, do 
not disclose or suggest the subject matter in claims 9, 1 1 and 12. 

In view of the above, Zhang and Leveridge, individually or in combination, do not 
disclose or suggest the subject matter recited in claims 9 and 1 1 . Withdrawal of the rejection 
of these claims under 35 U.S.C. §102(b) and/or 35 U.S.C. §103(a) is respectfully solicited. 
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Regarding claims 10 and 13, the Office Action asserts that Zhang discloses or 
suggests a transmitting unit that transmits to the authentication server information indicating 
that the connection server has shifted to a connection wait state. However, Applicant 
respectfully submits that Zhang does not disclose or suggest a transmitting unit that transmits 
to the authentication server information indicating that the connection server has shifted to a 
wait state, as recited in claim 10 and similarly in claim 13. 

Zhang discloses that if the authentication process was unsuccessful then the gateway 
device sends a prompt back to the host notifying the subscriber. See column 7, lines 25-29. 
This message is sent to the host and not to the authentication server. There is nothing in all of 
Zhang that discloses or suggests a transmitting unit that transmits to the authentication server 
information indicating that the connection server has shifted to a wait state, as recited in claim 
10 and similarly in claim 13. Accordingly, Zhang does not disclose or suggest the subject 
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matter of claims 10 and 13. 

The Office Action asserts that Leveridge discloses a message digest of the first 
connection authentication information. However, Leveridge does not supply the subject 
matter missing from Zhang. Thus, Zhang and Leveridge, individually or in combination, do 
not disclose or suggest the subject matter in claims 10 and 13. 

In view of the above, Zhang and Leveridge, individually or in combination, do not 
disclose or suggest the subject matter recited in claims 10 and 13. Withdrawal of the 
rejection of these claims under 35 U.S.C. §102(b) and/or 35 U.S.C. §103(a) is respectfully 
solicited. 

In view of the foregoing, it is respectfully submitted that this application is in 
condition for allowance. Favorable consideration and prompt allowance of claims 1-3, 5-7 
and 9-13 are earnestly solicited. 
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Should the Examiner believe that anything further would be desirable in order to place 
this application in even better condition for allowance, the Examiner is invited to contact the 
undersigned at the telephone number set forth below. 

Respectfully submitted, 

James A. OlifF / 

Registration No. 27,075 

Kipman T. Werking 
Registration No. 60,187 


JAO:KTW/eks 

Date: December 19, 2007 


Oliff & Berridge, plc 
P.O. Box 320850 
Alexandria, Virginia 22320-4850 
Telephone: (703) 836-6400 
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